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(54) Crypt key system for broadcast programmes 

(57) ' The invention relates to a crypt key system 
applicable to a television system, a database system or 
an electronic commercial transaction system or the like. 
This system consists of a broadcasting station 11 , a 
database 12, a receiving apparatus 14. a data commu- 
nication ^apparatus 15 and [a user terminal 18. As a crypt 
key system, 9 secret-key cryptosystem, a public-key 
cryptosystem.. and a.digital signature system are used. 
The keys used in the systenvare either encrypted or 
remain uncrypted to be supplied by broadcasting. The 
present invention is effective in the prevention of an 
unjustified use of the database system, managing cop- 
yrights,: and in a pay-per-view system and a video-on- 
demand system. Further, the present invention is effec- 
tive in realizing an electronic market which uses an elec- 
tronic data information system. 
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The present invention relates to a crypt key system * 
that is used in a commercial trade orthe like^ich iuses 
a television system, a database system or an electconic 
data interchange/ ' • * • :■ /; u- / ; eo*3i --;:T jo 



Prior Art 



In information oriented society of today, in addition 
to a normal terrestrial broadcasting- satellite' broadcast- . -'*s 
ing which is referred to as a broadcasting satellites (BS) -~ y 
and communication satellites' CGS)* or cable TVIaroad- 
casting which is referred- to ;as CATV (cable television)^ 
using coaxial cables or optical cables is getting preva- 
lent. .:>*-X : *~ v .-A ' •**cu i .xi*'". ,20 

In/a -satellite broadcasting :or CATV broadcasting 
which distribtrtes:several tens of channelis at-the ^me 
time, scrambled channels of such as films, sport events-* b 
and music which cannot be viewed through a cdmpre-:^ 
hensive contracts/are prrivided Jn: addition to unscranv 25 
bled general channels^ >ln /order to view these channels; 
it is necessary to subscribe to descramble the channels; T. 
however, normai subscription periodis about one- month 
unit, and it is-impossible to view-through temporary oorv-? 
tracts/':^ .-5 .~ r >iZ~:;l:o-'c? . j -Ai, : w * : io or,*; 30 

Theinventor oithe present invention proposed in the- ir»- 
Japanese : . Patent Application. Laid-Open No: 6-46419^ 1 
and the: Japanese Patent Application Laid-Open No-t£ 
1 41 004 a system in whichusers obtain & viewing permit- a -*? 
key from a chargingcenter ^a^Gommonicationlihd'stfid'? 35 
chargedrand descrambles programs scrambled eaefobp >, 
respectively different scramble pattern, using the viewing 
permit r key to view the programs; proposed in ■■wa^t-"'-: 
nese Patent Application Laid-Open NoT-6-132916' ah 
apparatus for trie operation. " so- 4d 

In these system and ^apparatus, those wtfo wish ttf ir. - 
use «cmrnbled^(^^nr^5r^u^ii^c> vk&vfr^c; the ^ 
charging «eme£ via?^ communfc&ti^^ 
communication . apparatus. The charging' center* trans* * 
mits the viewing permit key to* the ctf mrnunica&orf atfpa- 45 
ratus corresponding to the request for viewing whiles 
charging and collecting a fee. v.* :»v ;r:a j, rr ' ; -i" : * 

Users; on receiving the viewing'perrnit1<ey with . the - 
communication* apparatus, transmits the viewing permit < * 
key via direct means* connecting thfe- communication so 
apparatus and the receiving ^apparatus ^tfr> via it&direc£3 « 
means such as flexible r disks or the like/ The receiving .« 
apparatus to which theviewing^permit key is transrtirtt<&J^ 
descrambles the programs with the viewing permit key 
and then,* the users use the programs. - * . c/55 

Japanese Patent Application Laid-Open No/ 6^ = 
1 3291 6 describes^ system and an apparatUsfe>PSe!l and 
rent of a tape or a disk on which a plurality of data scram- * - ! 
Wed with a different scramble pattern respectively ate 



recorded to supply the viewing permit key with IC cards 
or the like and use a specif ic data. 

In addition, in these: days of information- oriented 
society, a database system has been propagated for 
mutually, using, data which are kept, independently by> f 
each computer by constituting a computer communica-i 
tion network by LAN (local area network), WAN (wide' 
area network) , and Inter-Net system mutually connecting: c 
these networks, r:; : ■ :; r : 

In the meantime, a technology has beendevelopecfc/ 
for reducing the information amount byicompressingra / r_ 
television moving picture signal which could not bedigi- 
tized because of a huge amount of information as a result r. 
of digitization, to enable practical digital ization. So far/ r - 
H.261 standard for video conference, JPEG (joint photo- 
graphic image coding experts group) standard for static 
pictures, MPEG 1 (moving picture image coding experts 
group 1) standard for storing pictures and MPEG:2 :cor-* : n 
responding to the present telecast and the^high- dteflnk;; *<* 
tion telecast from the television broadcasting- "are or 
prepared. 

The digitization technology using these picture com- 
pression technology is used for the television broadcast- 
ing or the video picture 7 recording m. In addition,,. 1 even 
television moving picture data which- could not be dealt v 
with before can be dealt with now* Then, the "multimedia . * 
system", which deals with various^data dealt with by ,the c 
computer and the digitized television moving picturedata - ? 
has been focused as a future technology. 

This multimedia system is also incorporated in the 
data communication and can be used as one data on the 
database. ' ^ . 

While the scope of usage of the database is 
expanded, the: method for charging for the data.usage 
on the database; and the method for dealing with copy^ s. « 
right problems generatecfcby copying, transmitting other 
than direct usage otdate, and also the secondary exploi- ; 
tation right problem generated as a result of data: edition • . . * 
have become important problems. /: .■f-;-» •> ;;o > 

To safely deal with charging and copyrights process-,:* < 
it is required that the data cannot be used by user& other 
than authorized users, and data encryption is the best 
means for it. ~ " •;vt»c 

In addition, an electronic market system has been 
investigated for converting information in various 1 kinds 
of transaction which has been carried out by paper doc-/ ; ^ 
umerrts so far, into an electronic data to execute elec- 
tronic transaction by musing the electronic data 
interchange for transmitting and receiving data by the 
data communication technology. In addition, an investi-'t 
gation is also made on the possibility of carrying out an j: 
electronical settlement ;on the' electronic commercial 
transaction system •• t - ■ ■ *. * . ? sr 

\n the commercial transactions, the reliabiiity on the* /: 
transaction details is required and the securityih'th3s^t- 
tlement isrequir«l. Consequently, in the electronic com- v \. 
mercial transaction system and electronic settlement 1 
systems in which such reliability! -and security are 
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demanded, it is required that the data is encrypted so 
that the data will not be falsified or used unjustifiedly. 

Irtthese television system, database system or elec- 
tronic commercial tr ansaction system or thetfke. the data 1 > : c 
is encrypted and thus a crypt key is required for decry^V 5r 
ing theiencrypted data to us. And the crypt key must be 
grVerttddata users; however, the processing is veryirou- 
blescgneiaecause security and reliability are demanded. 

In the structure of the present invention, data cryp- 
tology^acts an important part. In the beginnings-general 10 
explanatiorewHIrbe rr^ade on the data cryptology. - 

Iftthedata.cryptologyrthe case in which the plaintext 
data rM-is^ encrypted by using a crypt key iK to obtain a ^ 
cryptograrn data :C ; is represented: -*• r ? -..it ^sc ^ 

.;«ra:?;» ^C=E,(K, M),~ a f ,$ir 

and thexfisfeih Which thecryptograradata Cisdecrypted^ yr 
by usinQ the ccypt key K to obtain the plaintext data hA is 
represented:: ioofc, . • *3 ? i 20 

n >zr.z-~ r t - M=D (K. C) v ^I;^:? --.T 

j;\r.vv--- 1 j »•'. ■ r.-r .>* . t}-' ■ Jo j v 

As>a. typical, method for the data cryptography tech- 
nology,4bere are a secret-key cr yptosystem and a public- 26 
key cr yptosystenv ; The secret-key cr yptosystem isr . a r: 
cr yptosystem in which same.seaetkey Ks commonly : »s 
used^in encryption and decryption . }j -4 

ru ■;. .31 - 

■ Cmks=E (Ks. M) 1 30 

3*- 1 -\ • . ' * ■:■ a 1 -: • 

M=D (Ks, Cmks) 

Therpubticr key cfyptosystem is axryptosystermin cp* 
which a. key for encryption and a key tor decryption are 35 
used ascryptfceys.and.the key forjencryptiorris laid-open 
but the toy foratecryption is not open. The key tor encryp- 
tion : is (referred rto: as . a public-key Kb while \the key for 
decryption is referred to as a^private-key Kv. To use this- 
cryptosystem.an information sender encryptsjthe plain- 40 
text data M by, the pubic-key Kb^of ar^eceiver 

Cmkb=E (Kb. M), n 

anddfee receiver receives the data and decrypts it by a : 45 
privaterkey-.Kv to .obtain. the plaintextdata M. ■ v . 

- ■jn;; ; ' i - : - - .-.i : * 

... : n r - :i ■.}., M=D(Kv, Cmkb). -jms-- 

? i . d 'V='* : ■ ■ t _ > ; ^-.r~- -. 

In thn^publiokey cryptosystem, cryptanalysis is very dif- so 
ficufc- r* . - ■ ' ■• 

As an application oi the data cryptograph technol-^ f 
ogy. digital signature is performed as an electronic data 
authentication means to ensure the reliability oilhe data. 

Tr^ig*rta)s^natureisjusedaseoret-keyorapublic- 55 
key, Generally. lhe public-key is used, in thejdigjtal signa- . u 
ture. r v v :;v ^ ' v? * 

-Irv the. digital signature which is carried out by using ? 
the public-key, the signer obtains a digital signature by 



encrypting a document m to which the document M is 
compressed with hash algorithm, using the private-key 
Kv of the signer: - 

Smkv=E(Kv, m) 

and fransratts^the original document M or the com- 
pressesAdociimeni m and thefdigital signature Smkv to 
the receiver^ .s vc !•:•:.. • . • \ ; ,,tr . s . "'-mi ™ 

The receiver decrypts the digital signature Srnkv by, • - 
using the public-key Kb of the signer 

r."« " • : - 

m*=D (Kb, Smkv). 
i^inbtn ... " c - - . r^-r**: . \'''c '^cli'i "i 
V^en^mJsiestab^ish^Jrtisrecxjgnizedithatth r 
nature ^Qomect.icj' sjtoc.J. c > 31. . . v 

As«cmeth<xtfo£proyiding thesecsypt keys to, users, - 
the inventor of the fxesem4nvention^roposed antinveo- * 
tion entitied Iprypt k^ system'.in therprjoc Japanese Pat^ 
ent Application No. 6-70643. 

Irjtthe^arwallypraetioedcrypt key system, the crypt 
key is proyided only tojuserfe while the.crypt key is pro-,: ^ 
videdcto iaersons; other: tiian. Hjie users itn the crypt, key 1 - 
systenvoHfciis prior invention., v ad ir ^ ! v r, 

.ii Rg-4 shows the structure of. cr.ypt key system .* 
proposed :in frie Japanese; Raterrt (Application Na;^6- :~ . 
70643i£;r— a 0 ■ ?\»r-*. y.y**c. * *C ro\ .^k .: . s. <^v^ \ - 

Tbtssystem comprisesa broadpasting-stationl.for 
multiplex boadcastind^trt as BS,6Sift<OTestriatt)iQad* ♦» *u 
casting or FM or the like or data broadcasting, a data?.^,; 
basea2t a charging center 3 t a :f©ceivjngcappa»tusu .47 
dataiCoim«jnicatiQr>apparatua ^Sjaod aj^sen's terminal s. ^ - . « 

TJie:broadcasting stattoni^t andrthesdatabase; 2. and l y o 
the databajs^ iand thecha-grng oenterS arecorr^ected: 
to eacb,other vi&a cornmuijiicalion line such as a dedi- . 
cateddine or the like orltexibled^Q or the fikfei^TbedataL* •: r ' 
bas^f2 .arKi:ttte;dala commu«ication apparatus 5- are ; 
connected toyra comtnunioatipn Iine7 suc^h as a commu--r^ ~ 
nicatenline_QrrCATy lin^.. C ;s . :jA .r. « 

The broadcasting station 1 and tbeteoaiving: apparatus , 
4 areconnec^ wttbfteJ)roadq^ng:ra^ 
recebring:appac^s 43Bnd^tt3^sefr^jT)i^bwam £ .3 -j 
8, and <^e^t^jcomrnwij»*wapparatu3 5 and the user ^ o 
terminal3 a^e-connec^edfy/ith a direct means such as ai-c c 
connectionTcakale (Mian indiiiect means,su$h as.allexible 
disca»i;iw £f.*\*..v\- to te.?:..j.s. }('t \ ^l. r.c..:* ;-rr. . 

In Fig. 1 , what is shown wrtr\a $oli<*iioeis a pathipf - 
inforinattoirvwhichfis r?©t encrypted. What is shown with 
a broken Iito is a path of dajaiw*iich is ej^ocyptedr .r. 

In thissystern. 4he<5lajabase 2 prelinainarifcy, supplies . 
a pecrrutkjey Kp (hereinafter referred4ojasa "pen&Htkey") >.* 
including; frie crypt key^Kd which is diffenent ,frotrv^)ne • 
datafto another tp the broadcasting station 1 . The permit . 
key r^isexplainedjn such amanner tfiat the per-mit key 
>Kp constitutes the cryptrk^y-Kd onteifor better under- 
standing, r.-c ' ^.m. .r,:-\r-,' . 

rjn.sorne: case§, the crypt key Kdis supplied without . 
being encrypted.-and in other cases, ttjs engryptec* by; . 
using ttte common aypt key K0. r 
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CkdkO=E (KO, Kd), :.r:r?iz . , >: 

and is supplied as an encrypted crypt key CkdkGi.^ 

in the case where the crypt key Kd is encryptecT&od 
supplied, a common crypt key KO for decrypting the s 
encrypted crypt key CkdkO is supplied to usersrtThis-? 
common crypt key KO is supplied when users register 
with the database; or it is supplied to the; users together 
with the»encrypted data Cmkd When the encrypted data 
Cmkd is transmitted*: ^ <*'"■- : ■: 2.i t. -o .7 bi> > m 

(a) In the case where* the crypt key is not^cryptedV 

In this crypt key system, the brb&dcasting station i - c 
broadcasts the crypt key- Kd suppliecf from the database - 75 
2, by usingthe radio wave 6. ^ ^ r - * : * \ * I \ 

The" receiving apparatus 4 ^sUppHies the- received 
crypt key Kd to the user terminal 8 so that the usier ter- 
minal 8 stores the received crypt key*Kd in a retofdirrg 
medium such as a semiconductor memory, a flexible* ~2o 
disc, a hard disc or the like. '** vjccs.^)^ 

The users who wish ta use th^data request fbNhe' r - f » 
use of the' data M teethe datatoase2via1hfet56mrr^ « - 

tion line 7 by using th6*<jata communication apparatus! S> r 

The database 2 which ha£ received the 1 request for *' -26 
use of the date M encrypts the dataM by- the crypt key* * 
Kd which is a permit key Kp - : - ' irz ui rnico . 

v ^i'':r.^c. : :.-:C jt r .^ir - *: : ."' VT-.' 

-* : iwcw ^nGmkri=E (Kd, M)7-> ' : -ie* u fcr 

and transmits tf»e : fencr£pted data Cmkd to the data ' ^ > 
munic^ti6h%>pafatus*5 of ijsers via: the cbmmunicfitiofi 
line 7 and charges^with the^argihg certter3. rr > " \ 
The datacomrmjnicatidri ^p&ratus^5supplies"ihfe^ r ' 
receive encrypted data Cmkd to the user 'terrtiinal 8 -35 
while the us^r terminal 8 decrypfe ft\e encrypted- data 
Cmkd by the cryptkey Kd which issi6red in thereaSrdihg r: 
medium-' ■'■*" "-*? .» ^ <;\:«:^ s« ,.:n'> 

^ ■'. < , • - ?-., c«v ;.r, fc - 0 ts.Vtf 

M=D (Kd, Cmkd)v; " - 40 

(b) lrVthe : ^e f w>rerelie 6^Vk®y^^f\^^^^Lhiime^ S>- 
commbri'erypt key ^^reHmirTarily distnE&c*i J tfcr&seref:' 

In this crypt key system, when users register tORjse ^5 
the dataibase, the common crypt key KO is'supfjHed^fo' ' : 
users with the recording medium'suclf as ROM or fl&ibfe' r 
disc arid the' supplied common crypt key KO is storfed in 
the user terminal 8. ■•" r ' . ' :i< V." . 

The database 2 encrypts theicrypt key KcJ^by usihg so 
the common crypt key'KO^ >. 7 ' . ~ - --r>i ■r /i^ --i r 

" *** CkdkO=E <K0, Kd);< • - - v 

and supplies encrypted crypt key CkdkO to^the broad- V r ss 
casting station : 1 . !i - " ^ 

TTie broadcasting station 1 broadcasts the received ^ 
encrypted crypt key CkdkO supplied from database 2 by '■• " 
using the radio wave 6. 



The receiving apparatus 4 supplies the received 
encrypted crypt key CkdkO to the user terminal 8 which 
decrypts the encrypted crypt key CkdkO in the beginning 
by the preliminarily stored common crypt key KO 

Kd=D (KO, CkdkO), 

and stores the decrypted crypt key Kd in the recording 
medium such as a semiconductor memory, a flexible disc 
or a hard disc. f ■.- ' : ; o 

Users who wish to use the data requests for the use 
of the data M to the database 2 via the communication 
line 7 by using the data communication apparatus 5. 

The database 2 which receives the request for the 
data usage encrypts the data M which is demanded "for 
usage encrypts data M by the crypt key Kd 

Cmkd=E (Kd, M), . - • & v^^r 

and transmits it to the data communication apparatus 5 ' 
via the communication line 7 and chargess ~witrv the 
charging center 3. ^r:^ ?r. 

The data communication apparatus 5 supplies the 
received encrypted data^Cmkd to the user terminal 8 
which decrypts the encrypted data Cmkd:by the stored 
crypt key Kd if>r i. t« 

M=D (Kd. Cmkd). ^ cv vi ^;- 

(c) In the case where the e&ypt key is encrypted and the 
common crypt key is distributed to the user together:with ; 
the encrypted data: * ^ r :^ 1 r on 

In this CTypt key system, the database 2* encrypt the » 
crypt key Kd by the common crypt key KO 

■ * * * - - "_ .*.."'*■ '■ '• mn if - ? C 

CkdkO=E (KO, Kd) 

and supplies it to the broadcasting station IV t.ot - .■ 

The broadcasting station 1 broadcasts the 
encrypt ed^crypt key CkdkO which has been supplied 
from the database -2; iby Us»ng the radio Wave ^v - - 

The receiving apparatus 4 supplies the received 
encrypted crypt key CkdkO to the user terminal 8. The 
user terminal 8 stores the encrypted -crypt key CkdkO in 
recording medium such as a semiconductor memory, a 
flexible disc, or a hard disc or the like. " ' » 

Users who wish to use the data request for the use 
of the data M to the database 2 via the communication 
line 7 by usihg the data communication apparatus' 5 - * 

The database 2 which receives the request for the 
data usage encrypts the data M which is demanded for 
use by the crypt key Kd c' 

Cmkd=E (Kd. M), < 

and transmits it to the data communication apparatus 5 
via the communication line 7 together with the common 
crypt key KO and charges with the charging center 3. 
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The data communication apparatus 5, supplies the 
received encrypted data Cmkd and the common crypt :r 
key KG to the user terminal 8. The user terminal;^ :x, 
decrypts th&encrypted crypt key.CkdkO which has been - ». *- 
stored in the recording medium by the common crypt key s 
KO 

e u ., * Kd=D (KO, CkdkO), \ : 

and decrypts the encrypted data Cmkd by the decrypted \ to. 
crypt-key^Kd < i i - . . . • r 

„ > s - * M=D. (Kd, Cmkd). ■;■ . 

Summary oHheJnvention.* r *.J* 

The present invention provides a concrete structure 
for applying the invention of the crypt key system 
described in the previous applications to the television 
system- the database.. system**: the electronic cornrner- 20 
cial transaction system or the like. 

This system comprises a broadcasting station, a 
databases receiving apparatus, a.data communication 
apparatus; and a user terminal. As the crypt key system, 
secret-key; cpyptosystem and the public-key cryptqsys- 25 
tern are used. In addition, the digital signature is used, 
and the crypt key is supplied through broadcasting with 
either encrypted or uncrypted^ ' 

The present invention is effective in the prevention 
from unjustified use orithe copyright management in the so 
database system, a pay-perrview system; or a video-on- 
demand system. Furthermore, the presentinvention is a 
useful means in the realization of an electronic market 
using the electronic data interchange system. 

Brief Description of the Drawings 

Fig. 1 is a structural view of a crypt key system 
according to the prior applications. 

11 .:• .v..-*/ 30- ' 40 

:Wigr% js a^sttueiural yiew of»the crypt key^system?; ^ 
accordirigio5 f ir^embodirnent of ?the<p^ esent invert . 

. Figgis a structural: view of the crypt key system 45 
•according to a second 'embodiment of. the present 
invention. 

.'. . . i- -: ur 

Fig. 4 is, a structural view, of the crypt key system . 
acoorcUng to third .and fourth embodiments of the so 
present invention. . 

Figs. 5(a), 5(b) and 5(c) are structural views of fifth , y - 
embodiment to which the present invention is 
applied. ■(••-■ 55 



Embodiments 

Embodiments off; the present invention will, be. 
described;byusing Figs:^2 through 4. 

r : j ■ ?.. . v j - *» 

[Embodimgrtl], ^ > ; { 

A system .shown in Fig. 2 is a crypt key system off; 
the ^bo^ment 1 ir> which the present jnyeationcis ;■ 
applied to a database system. This system comprises a 
broadcasting station 1 1 which either a multiplex broad- 
casting by.ofBS, CS, a terrestrial wavetelevision.rorFM . 
broadcasting or the like, or data broadcasting by a digital 
broadcasting, a-datalsase 12 in which various kincterof 
data including moving picture data is stored, -a charging^ 
center 1 3, a receiving apparatus 1 4 for receiving the data ( 
broadcasting offered byjthje broadcasting station. 1 1 , a 
data -communication j apparatus 1$ for-cornmunicating v 
with thetdgiabase 12 and th§ user terminal^ 18 for using,, 
thedata^oj- c t ■.<; n :c "ow** r r- - ?r ? 

The database 12 and the broadcasting station 11, : . 
and thedatakas? 12 and t£e charging center 1 3 are corv 
necte^ wrth adireqt rjrtean? conneeftng^wfth a communi- 
catioRl^^crv^s a dedicated line pr jan indirect ijieans 
such e^ ^i^ciWe,diseorithe like*. ^evdatabase.tS and 
the data cprnmufiieation ^parat^s ^aFe connected with 
a communication line 17 such as a c^OTnic^tion Jin?. . 
or CATV line or the like. Then, the broadcasting station 

1 1 and the receiving apparatus ) 4* ar^ connected with a 
radio wave 1 6 such as a terrestrial wave television broad- 
casting-^teHite-teleyisipn bropdeaftiittg. /JAJYi^Q^-; 
casting.fWbroadcastin&pr 

or the like. The receiving ,a|^r^tus:1 4 
minaj 4^8, and the ^ateioogar^nication ^pparatu^ 15 and 
the userrtewnirial ig ar^ cpnneciedjwiiji a direist means 
sucrfcjafca.connectipn;^^ means such 

as ^w^disciort^Ji^ ^ ^ - - 

What is shown with a solid line in Fig. 2 is ; an ;: 
uncrypted data path and what is shown with a broken 
Jine is an encrypted data path:; , . j ^ . 

Incidentally, data exchange between the database 

12 andTtke&rj*^ 

and th^ ch^ra^c^e^^Sf arev.in prin6ip|e.<c?arrjed pm 
withadedicatedlineoraflexibledisc. In addition, a public 
ljne,^a L brpaclp96ting satellite, a communication satellite 
or a,'terresfcf)al,w?ive brqadp^sting can be used. In^such 
a c^^^>Wfypted ■ •■ ; - 

r In this^ystern, the ^ewet-key cxyptosystern and the 
public-key cryptosystem are used. . , 

The dat^)ase 12 prepares the publicrkey Kbd and 
the private-key Kvd to supply the public-key Kbd to the 
broadcasting station 11. The broadcasting station 11 
which receives the public-key Kbd broadcasts it by atele- 
text multiplexing broadcasting using scanning lines dur- 
ing the retrace blanking interval jDeriod of an arnalog 
television picture signal, the data broadcasting using a 
sub audio band of the analog television audio^signali FM 
multiplex : data^ferpadGasting or digital data broadcasting^ 
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Further, in this case, a digital signature of the data- 
base 1 1 can be done to the public-key Kbd v , w . *r 

The data may be supplied without encrypting the 
menu in which the titles of data which can b£ used; the 
content introduction of the data, product catalogs ,oider 
forms, blank checks, the copyright information- fog the 
convenience of the data usage. . ?fi ? r .• .u-.: 

The receiving, apparatus : T4 : which .receives .the 
transferred public T key Kbd sends. thepubJic4«y>.Kbd to 
the user, .terminal 18^ The user. terminal t 18, which 
receives the transferred public-key Kbd stores thepublip. 
key Ktxj in { the Recording mediumjsucrvas a semiconduc-. 
tor memory, a flexible disc, or a hard.di^c or the like..., 

Users who select the data/whi.ch 3 they request for 
usage by means of menu or the .introduction^ cqntents 
request for. the use of data hfi i to the database -12 -.via .a 
communication line 1 7 by the data communication appa- 
ratus. 15. ■• • ,-\ w.-r.'^^rc-;:: 

At this tirne, the user encrypts th&publicr key tKbd hof 
the database 12 by* o<yn secret-key j&su which, hafs 
received from -the datab^seil2t - ....r-m.;;- ~ .Ljcra 

. , CksukM«E (Kbd; Mksu)> -. > * 



,70 

v. I i 



75 



3 J?0 

rr „ * 



and transmits it |o the database 12,: er. ^-ci,- - c ^25 

The database 12 decrypts the encr ypted secret-key fn 
Cksukbd of the user by the private-key Kvd- > > * - 

.". • C.:rc. T>* -V -•■ . , rsrl A 

,. r .t Ks4=D r (Kyd,:CksuWC3d) . * • i ^ :d 

and encrypts th^data; : M;whjch is requested tor 'use toy.) • . 
the decrypted user secret-key Ksu:? >; in<3v„ 

\. : cCmksu=E (Ksu, M). . - d srH 

and transmits; it to the data communication apparatuses r 
of the | user via the communication Jine 17,r^ -ovr-M r,c':*. 

The user who receives the data» Gmksg encrypted 
by own secret-key Ksu decrypts the encr ypted^data 
Cmksu with the user terminal , 18 . . .....rc: s :r M 

-sfb '»c 9io:xeir " 

st «~ bfc»v&;5 MssQifKsu; ,CfTiksu)uinmoc 10 gn^c-bE'rc 
irnj-.**r-. -?;-tJ > VIG* >O0 3 ni bsO":;: ? oer'w 
to use itt r' ■ :s,ri .ds ..t. - 

This- system is, provided with xriarging center. \13.\ 45 
which is incorporated with the database 2. . This charge . 
ing cer^ter 13 is used when the data is provided with pay 
basis. In ^e case where the data is one which is provided, 
with free, such as shopping information or ther.like.tthis c » .v 
charging center .1,3 is not used. However, even the data / : so 
provided with free such as shopping Information, or the ^ 
like, the charging center is used im the case where 
charges are to be settled along with orders * c- \ i ! 



[Embodiment 2], . ~ - ~ > ; - ; r. - + 

Fig. jZ shows a crypt key system according to « 
embodiment 2 in which the present invention is applied 
to a video on demand (VOD) system which broadcasts 
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television programs corresponding to the requests from 
users. 

This system comprises a CATV station 21 , a charg- 
ing center 23, a receiving apparatus 24, a data commu- 
nication apparatus 25 and a user terminal 28. 

The charging center 23 is used when the television 
program is provided on pay basis but not used when the 
television program is provided without charges along 
with advertisement. ,c v /• 

In this system, the encrypted television broadcast 
programs and the crypt key are transmitted with the 
CATV line 27 which is a single path. 

The CATV station 21 and the charging center 23 are* > 
connected with a direct means for electrical connection 
with a communication line such as a dedicated line or > 
the like, or an indirect means such as flexible disc or the - ' 
like. -The CATV station 21 and the receiving apparatus : 
24, the CATV station 21 and the data communication 7 
apparatus 25 are connected with the CATV cable 27: The 
receiving apparatus 24 andthe user terminates, the data * 
communication apparatus 25 and the user terminal 28 > 
are connected with.a direct means such as a connection <■ 
cable or an indirect means such as a flexible disc or the < 
like. r - ~> ,o : % - 

What is shown with a solid line in Fig. 3 is an 
uncrypted -data path and what is shown with a broken^ 
line is an encrypted data path. . i 

Incidentally, the data exchange between the CATV- - ; 
station 21. and the charging center 23 is carried out 
through a dedicated line or a flexible disc in principle. 
Additionally, the data exchange is also "carried Out by 
means of the communications line or the broadcasting « 
satellite, the. communication satellite and the t^rrestriak - 
wave broadcasting. In this case; the data is encrypted. 

In this systera the CATV system is treated as one 
kind of database. As a crypt key method, the secret-key - ! ' ' > 
cryptosystem and the public- key cryptcfeystem" are 
adopted. >>. ^ ; ■ 

Users who use this VOD system either registers their ■? -•• ' 
own public-key Kbu with the CATV station 2-1 in advahcfe 7 , 
or transmit the public-key Kbu by using the communica* i 
tion apparatus 25 at the time when the request to usagaP B - 

The CATV station 2 T;encrypts the}stecrk- KgyKm «* 
of the CATV station 21 by the transmitted public- key : Kbu ^ 
of users ■* * •.. .:*,•: 

Cksbkbu=E (Kbu, Ksb): ^ f t .- : ^ f ^ 

and transmits it to the data communication apparatus 25 
via the CATV line 27 ^ - : * .--o 

The television program M is encrypted by using ki- 
ttle secret-key Ksb of the CATV station 21 ■-'«. - 'i ' 



- Cml^^E (Ksb. M) 



and is broadcast to the receiving apparatus 24 via the 
CATVIine 27. ^ . • - r , : 
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The user, decrypts the received encrypted secret- 
key Cksbkbu of the CATV station 
21 by the private-key Kvu of user . 

Ksb=D (Kvu, Cksbkbu) 5 

and decrypts the encrypted television program Cmksb-' 
using.-the decrypted: secret-key Ksb of the decrypted 
CATV station 21 

,f: - .M=D(Ksb. Cmksb): . . ^' 

for use. j - - ; ■ i ' . . - ' '. '*"•"" •• 

In addition, this crypt key system is- applicable, if 
encryption is. available, to the television broadcasting is 
other>than CATV, audio broadcasting, or data broadcast- 
ing. As «/netbod; for transmitting the crypt key from the ^ 
broadcasting station,. the teletext multiplex broadcasting* 
using the scanning lines during the retrace bfenking : 
invervatpf ?an "analog television ppicture signal, the data 20 
broadcasting using an sub audio band of the analog tel- 
evision audio signal . FM <multipl ex data broadcasting,' or e 
digital data broadcasting can be also used^ O'er 

In addition, this crypt key system can be used when *> 
the crypt key is distributed in the data copyright manage- 25 
mentsystem which is described in prior Japanese Patent 
Applications Nos. 6-64889. 6-237673. 6-264199. 6- r 
264201 and 6^269959 proposed by the present inventor. 

This crypt key system can be also applied to a case 
where : a recording medium such as a CD-ROM or the? 30 
like iqwhish a plurality of informations are encypted^vith 
a pluraHty-:of different pattetrisand are recorded, which - 
is described in- Japanese Laid-open Patent Application 
No. 6-132916, proposed by the present inventor. 

Thesej inventions of previdus applications are 35 
explained; hereinbelow rr ■ ? r i., 

An outline of the data 'copytight management?sys- - 
tern described in Japanese Patent Application No. 6- \ 
64889 i% cjeseribed as follows. 

T&pontrol the copyright iii the display (including the : -4p 
process sound), storage, copy, edit andlramsfer of dig- : 
ital dafedrj the^atat>a&e system- including, a real time . 
tran^njs^i .^digital pictui^any torieor apluraJity 
among a, program for > managing the copyrights a copy- «• 
right information and a copyright management message 45 
are transmitted, when needed, in addition to a permit key 
for allowing the use of encrypted data corresponding to 
usage requests from users. 

12)$, copyright management message is displayed . 
on a screen and advises or warns to the user in case the so 
datan&utilizedother than<the conditions of user's request 
or the permission. T the copyright management program 
watches and controls in order that the data is not utilized 
beyond the conditions of user's request or the permis- 
sion. 55 

The copyright management program, the copyright % 
information and the copyright management message are r A .J 
supplied together with a permit key in some cases, or 
they are supplied together with data in some other cases. 



Or, a part of them is supplied together with" the permit 
key, and other part is supplied with the data. 

Fbf dataiThe permifkfey, the copyright management 
message* 3fie copyright information and the copyright 
managemeiht - prbgram, there- are the following three 
cases:' aP^case where these -are transmitted with : 
encrypted, and upon using, the encryption is decrypted, * 
a case-where they are transmitted with encrypted and 
remain to Vtcrypted except being decrypted only wtien 
they 'are displayed;'' and a case where f they are not : " 
encypfiWcatall.^^ - .;a :. w 

An* doflirte W the^sta- ctopy right irfeThagemeftt sys- ' J 
tern describSd'inP Jfcp&rtfes§ Pate* Application No: 6- : ' 
237673 1$ described^'foltowS: - *• ' *" ^ 

Thlsaatabase^opyrigrrt managerfyent system cbm^- - 
prises & database in^vhtch uneryjjted dataH&storebl^a 
data saipplymeans of ^broadcasting statidnisuch assart- ' 
eliite broadcasting station for broadcasting the encrypted '* - 
data Irani the databaSe^r-bf a >ecofdiri<J mediOrh such 
as a CD- ROM where ertoryptetfdata^ from the database 
is recorded, a communication networks a kfey* cbnfrbl 
center for controlling a crypt key, and a copyright man- 
agement center for corttfblliAg v «5^ the data- 
base. Then, the database utilization program for using 
the database, the copyright r mar*a$emerit program for 
controlling the copyrights; a f irst'Crypt key arid a -sedond 
crypt key are used. " - ■ ™. •« * ; * * - ~ - : - 

A first user registers with the key control center in 
advance for using the ctetabaseMt Wat^tirhe, the data- 
base use program is distributed. This database utiliza- 
tion pi^ramlndudesiitorrriaT^ ' 
program for generating a crypt key unique ttf tiWf ifsf tis^ir 
with a predetermined algorithm by using the information. 

The data is stored . 4tf v'the^ database without 
encrypted, and when it is distributed by broadcast; or 
through .recorded On: a recording medium or^ 'communi- 1 
cation network, the data^ is ehCrypted r by the first drypt' 
key to^anienccypted^ftta;- n ?■ ■.. sv or 

Th^ebcrypted-tiatd* is *storecPin recording medium 1 
such as a semiconductor meJrhdfy bt tffe first ds6r ¥ermi ~ • * »■ 
nal, a flexible disc or hard disc, when distributed via 
broadcasting or communication rwawbr ^is stayed as is 
when recorded in a CD-ROM recording medium and dis- 
tributed, or is stored in the recording mecfium such as a- 1 - 
semiconductor memory 'of the fhfcttiser terminal, a fFex- 
ible dtecor a hard-disc of the lik^i r - r '> - 

The first user who^tees the data directiy* from the ':-* 
database requests a key for decrypting and using- the 
encryptbd data to the key control center* via the comrnu- • v 
nication network. Information concerning thefirstuser is 
presented at Jthis time; ;r«i ^ • • - 

Theikey control center transferd thfe" intormdfiort ori 
the first user to the copyright management center while 
the copyright management center uses information I 
concerning the first user to generate a crypt key peculiar - : ~ 
to the first user by a predetermined algorithm, and the 
generated first user crypt key is used to encrypt the cop- : 
yright management program, the first crypt key and the • 1 * 
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second crypt key to be transferred to the key control ;* 
center. . . c - 

The copyright management program encrypted by 
using the crypt key generated by using the information 
on the first user is peculiar to the first user. s 

The key control center which receives the encrypted 
copyright management program .transmits to the>iirst 
user terminal each of the encrypted copyright manage- 
ment program, the first crypt key and the:second:crypt : 
key via the communication network. Then;,the*f irstuser . i -io 
stores the received encrypted copyright management . 
programme first crypt: key. and second jcrypt key in.a 
recording medium such.as a semiconductor.memory r a 
flexible disc. or*.a hard disc:* ^ 1*5 ;■ • ■«.,..'.■•*--'*' 

"("he first user generates the crypt key peculiar to the 15 
first user by using a database utilization program which, 
is distributed in advance and using information on jthe^ 
first user with a predetermined algorithm: Then,.thef icst J . 
user decrypts the encrypts copyright managementpror s 
gram, the encrypted first and second crypt keys. and. the .-20 
encrypted data is decrypted by the decrypted f irst jcryj5i 
key. . • •■, y ,1 • j ■ A % naxrx i 

In the case of storing, copying and tr^sferring^the^ 
decrypted data, it is encrypted by the second crypt key 
decrypted with the decrypted \ copyright management 25 
program. Then, the encrypted data is stored in the 
recording medium such" as the semiconductor.memoFy/ v 
of the;f irst user terminal, thef lexible discor the hard disc . . 
or the Jike,. When thelirst user uses the stored encrypted ■ 
data, it is decrypted by using the secohctcrypf key: Then; * 30 
this operation is repeated for primary .sue of the data:; * 

When the encrypted data < isxopied on the external 
memory mediurmor isttransferred to the second userte** O 
minal via the communication network, tfre first ctyptkey 
and the second crypt key are disued by the copyright ^ 35 
management program. The first user then.cannot use 
the encrypted data. . . .j //■ .j-c-v. • 

At this time, when the encrypted data is stored in the 
first userterminal, uncrypted information on the first user ^ 
is added to the encrypted data which lis stored. ic t js ! o\ 40 

In the case where the first user uses the encrypted 
data gain, the first usecobtainslhe f icstvfe:% ptiiey and the 
second crypt key from the copyright management center. 
With thexegcantof thef irst crypt keyand the second crypt' - 
key, it is confirmed that the second:user. exists which has =■ 45 
received the copy or the transfer of the encrypted data 
from the first user, and the fact of theJsecond user is 
recorded on the copyright management center. 

The second user who has received the copied-or 
transferred encrypted data requests for the secondary so 
use of the encrypted data to the copyright management^*- 
center. The second user is not required to register with 
the key control center preliminary, unlike the first user. At 
the time of the request for data use, with the presentation r:r 
of the information of the first user from : which the -55 
encrypted data has been copied :or* transferred to thfe 
copyright .control center, the request is accepted: If the 
first user: information is not presented at this time t : the 
user is recognized to be thef irst user and not the second, -t 



user who has received the copy or the transfer of the 
encrypted data from the first user. Thus, the request for 
the secondary use is not accepted. 

The copyright management center.which acepts the 
request of the secondary use transmits the second crypt 
key for decrypting the encrypted data, the thirdcrypt key* 
for reencrypting and redecrypting the decrypted data 
and the' copyright management program for the afore- 
mentioned decryption, the reencryption and redeceyp- 
tion. to the second user, \, * , ■. 

The outline of the copyright management* system 
described in the Japanese Patent Application No 6- 
2641 99 is described as follows. -« ± ::r 

This copyright management system uses the first 
public-key prepared by the user, *. » •*< v ? 

the first private-key corresponding to the first public^keyp 
the second public-key, the second private-key * correPr 
sponding to the second public-key, and the; first secret- 
key and the second secret-key prepared by the data- 1 
base. y-~ . 'rivv^ v-r-.o^-v^ 

The^database side encrypts the data which is not .' 
encrypted by using the first secret-key, and encrypts the *: 
first secret-key by the first public-key, and the?second 
secret-key by the second public-key. These encrypted- 
data; and the encrypted first secret-key and second 
secret-key areitransmitted to users. ' • : * r 

The user decrypts the encrypted first secret-key by 
using the first private-key and decrypts the ericryptecl 
data by the decrypted first secret-key for use. Then, the ^ 
user decrypts the encrypted second 2secret-key by the 
second private-key so that the decrypted second secret- ' 
key is used as a crypt key for data storage: copy and ■< 
transfer after the decryption 'of the data. ~ '* » i c 

The outlined the data copyright management sys 1 - 
tern described in the Japanese Patent Application No. 6- 
264201 is described as follows. ~. . - > - J.-v 

In the case where new data is r prroduced by editing 
a plurality of encrypted data which are obtained from the- 
database and is encrypted to be supplied^to"Oth6rs, the* 
Crypt key fora plurality of data which are GM*iginal^rrtate^ 
rials and edit program as editing process with^ a digital - 
signature are used as a use permit key. 

When the user who has received the^&H&^aKti 
encrypted data requests for use by presenting the dfoitar 
signature to the copyright management cerrter $ the cop-- 
yright management center recognizes the editor on the 
basis :of the digital signature. Only in the case tthere it is" 
recognized that the' editor is the authorized user of the' 
edited data; the crypt key for use is provided, to those 
who request for use. n -v* * t.,z 

The outline of a method described in the Japanese* 
Patent Application No. 6-269959 is explained as follows: - 

A first user receives the encrypted data in which the 
original data is encrypted by the first aypt key frdm*the 
database and decrypts the^data-at the time 5 of ue^ge. 
After that, the data is encrypted by a second crypt key 
generated With a predetermined algorithm using one out" 
of the first crypt key, the first user data, and the data 
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usage frequency or a combination thereof, and is stoced, . . * 
copied and transferred. / 

When the second user requests the secondary use : ; * - 
of the data ; the data<copyright management centergen- 
erates the second crypt key with a predetermined algo- s 
rithm by usingone out of the first crypt key of ihe original 1 
data, the first user data tand the data use frequency or a n 
combination thereof to be provided to the secondruser!* r i 

Theisecond user to whom the second crypt key is * * 
provided decrypts the encrypted original data by using, - io 
the second crypt key for usage. •.• ■ » ^ lit i t 

[Embodiment 3] •••• m* v 'jhj.^; .. <if ^ 

The system shown in Fig. 4isa.crypt key system- of 75 
embodiment 3 where the present invention is applied to 
the database system or the VOD system/- u 

J4ke4he crypt keyrsystem shown in. Eg. 3 of embod- 
imeni^iatbis crypt key system, the television broach 
casting programs and the crypt key pass through a single » v so 
path whiclris; theXATV Hne; however, thesemaycpass 
through ttijferent path K as a matter of eouse.-? ".-«.. < 

tThis system .comprises a CATV station 31 for data ? 
broadcasting ^ a data managing center 33 such as data- * 
base,-a.A«deQjsystem or the like; a receiving apparatus 25 
34, a data communication apparatus 35 and'a user ter^ r . 
minaK3S>. ' r - cv 

The data^managingtcenter 33 and the CATV station 
31 areconnectedwrthadirecttneansforconnectingwith , 
a communication line Suchas ^dedicated line or the like ■.- 30 
or with an indirect means suchasf lexible disc or the like/. 
TheLGATy-station 31 and.the receiving apparatus 34, »• 
and the CATV station 31 and-the data- communication 
apparatus35,ai:e connected with the.-CATV-line.37. Incir 
dentally,, instead of the CATV line 37; a communication 35 
line which is an appropriate data broadcasting or avai)- 
abierfor data communication can be used. The receiving 
apparatus 34 and the: -user terminal 38. andithe data 
communication apparatus; 35and the. user terminal 
mean? are coranected witfra direct means suqhas a con- 40 
necttonoaWeor^witii-an indirectmeans such as a flexible, o 
disc. -« in' -J- 7, sag i n& e*'-? . 

3/Vfea*is;&t)o^n with.a solid line js an uncrypted data 
path in f v&A and what fes shown with a broken'line is: an zr 
encrypted data path. -c . - r.crvt l r 45 

The data is exchanged between the data nftanaging 
center 33 and th e€ ATV station 3 1 i n pri ncipl e with a ded- 
icated Hne or a flexible-disc. In addition,. tbe. data may be 
alsoe^changechwith a communication line, a broadcast- 
ing satellite, a communication satellite and a terrestrial so 
wave- -broadcasting; In such a case, the data^is 
encrypted. -" x ;* 

^Thisjprypt key system adopts the secret-key crypto- 
system and a public-key cryptosystem. v 

Thedata managing center 33 prepares and supplies . ss 
to the CATV broadcasting station 31 the public-key Kbd 
and the private-key Kvd common in all the data to be sup- 
plied aodjhe secret-key Ksdi which is different from one 
data to another. The CATV station 31 encrypts the 



received secret-key Ksdi by using the public-key Kbd of 
the data managing center 33 

: : r: u t Cksdikbd=E (Kbd, Ksdi) . 

and broadcasts it by multiplex teletext: broadcasting 
using, scanning lines during the retrace line blanking 
interval" of the analog television picture signal; the data 
broadp^stihgcusing a subaudio band of the &nal6g,tele- 
visiorpaudio signal, FfvTmutiplex broadcasting, or digital 
data broadcasting. t*{ . w . . :• . ■>:? :* 

Forconvenience<of the data usage;imeniJ showing ; 
titles of avait^Wedata andlntrodutrtion otdataoutlin^can » 
be also supplied without encrypted to promote th^use' 

User who^selected the desired data requests t>y the 
menu brthexorrtent introductiorr requessts-for-using^tiie 
data toihe data managing/center 33 via the CATV line 
37 bya3Sing:the^ta-comm^icationilrne35 thrdugh ft\e 
CATV station 3 1 . At this ti me, the user transmits own pub- 
lic-key^Kbu4olhe data managing' center 33. . 

Thexiata. managing center 33 which has received 
the request for use from the user enctyps the data M by 
the secret-key tesdri > is f- .* o d jfir,* • 

f A > \c \ v -, c "'3?, r»i ; ; jV/ ";;"*;0 ;» . i->..w _ . 

r-ar r- .i* : - ;t Crnk^disE (Ksd'r, M) ^ ' 

Z'H rJ :' v L' V J' '.r? s>.- ' ; u ." 

and transmits it to the useretermina! 38:-At that time}»the - 
pri vate^key Kvd of the data managing center is encrypted ■ * 
by the43ul?lic-key.Kvu of the user.who?Has requested the 
use Ckvdkbu=E (Kbu;rKbd) x^a * *d C3Vf -pc ^. rs > 
to be transmitted tothe user terrairialJ38^ noifAV, ? 

IRiecuser who^receives the;encryp|ed private^WBy 
Ckvdbtiui <rof th e data * mafnag ing. center • decrypts th ^ 
encrypted privately CkvdWsu by the user private-key 
. Kvu rrignv- r.<1 .* b>uc:r y\ - * * 7 ' zi ro^J*'- : 
r:r; ^ : -ir ;rr\ •* ' . »vi . ^ . : 
Kvd=D (Kvu, Ckvdkbu) 
sitni oev..c" h *£'*.• v ? ^< *o. 1 -rfi - a v 
and decrypts tine encrypted seaet-key. Cksdikbd by the 
decrypted private?keyiKvd of tine d^ta managing center. 

ertj L. ns ^9Kscf^^Kvc^C4^kbd);3o s<ir nioo = 

decrypts-, thereneryptedtdata CmkSdi by the. decrypted 
secretrke^Ksdl'Of. the datarmanaging center V t 

ci i:? .: ^ M??Di1Ksdi,-Cmksdi) 

'ii ^ r . » ■.;«' . ■ 

and use-it. ;^ >^ b v - -\ - v r 



[Embodiment 4] r 



Since the system structure of embodiment 4 is the 
same as: embodiment 3 shown in . Fig. >4. explanation' 
thereof will i>e omitted.^- * : ,* •„ ■ 

,T-this system adopts the secret-key cryptosystem 
and the . public-key cryptosystem as the crypt key sys- 
terreimilarly to embodiment- In embodiment 3;. the pri- 
vaterkey Kvd of the data managing center is encrypted 
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by the public-key Kbu of users who request for use.while 
in embodiment 4, the private-key Kvd of the data man- 
aging center is distributed in advance by using the IC 
card or the like and stored in the user terminal In embod- 
iment 3 data M is distributed corresponding to the 
request for data usage, while in f embed iment 4 th.e$Jata 
M is broadcast by means of the CATV line or th£ satellite 
broadcasting irrespective of the request for data usage, v 

When the user subscribes a compreherisive^con-- 
tract for using the database with'^the data managing 
center, the private-key Kvd of the data managing center 
which is commonly used with all data to be .supplied is 
previously distributed to users by a recording medium 
such as-ah IC card or the like or a CATV Sine 37; j and 
stored in the semiconductor memory of the user terminal • 
38, the hard disc or a flexible disc . i. . * *. ;o 

The data managing center 33 prepares a secret-key 
Ksdi different for each supplying 'data and a public-key 
Kbd, and supplies them to the CATV station 31. The 
CATV station 3t which receives :the* secret-key Ksdi ' : 
encrypts the secret-key Ksdi< by the public-key kbd. .n \j • 

Gksdikbd=E (Kbd;JKsdi) /-.,"•, 

and broadcasts it by means of teletext multiplex broad- 
casting using scanning lines during the Tetrace blanking 
interval of the analog television picture signal, data 
broadcasting using the -sub audio band: of- the analog teK : 
evision audio signal, FM mUltiplex'data^broadcasting-orn 
digital data broadcasting. 

At this time, for the coriveriiencB orthe data usage, 
menu showing the titles of data which can be used, or a 
content introduction for explaining 7 the data outline for 
promoting the data usage can-be also supplred-wrthotrt 
encrypted. - : «3?jer!;;r ..'->^-M 

The CATV station 31 encrypts the data Mby the 
secret-key Ksdi ■^■•^-^ 



10, 
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Other modifications of the embodiments, for distrib- 
uting the crypt key will be explained. 

[Embodiments] v 

In aforementioned embodiments, the public-key Kbd 
of the data managing center is broadcast from the broad- 
casting station instead of the communication line. Thus, 
it is impossible to confirm whether the public-key Kbd is. 
justified or not. . /r : ~&rs.. : 

in such a case, the private-key Kvd of the data manr; 
aging center is used for digital signature to the.publicrkey.r 
Kbd of the data managing center. 

Skbdkvd=E (Kvd, Kbd) 



20 



Cmksdi=E (Ksdi. M) 



and broadcasts ft via the CATV line irrespecfive of the 
request lor use.QY '0*v* tw n xnsz -y rrrot isbio -srStTi bws^ 

The user incorporates desired dHta'mri cfithe data' 
which is broadcast via the CATV line on the basis of the ; 
menu or the content introduction irttothe. user terminal 
by using a receiving apparatus 34, * ■ - ; • - ' 

The user decrypts the - encrypted - secret-key 
Cksdikbd by-the private-key Kvd df the d^a managing 
center which is stored in the -semiconductor memory* \m 
the user terminal 38,a f hard disc or S'ftexible disc- • "S«=< 

Ksdi = D (Kvd, Cksdikbd) ' 



arid decrypts the * encrypted data Cmksdi by- Jhe ^ : 
decrypted secret-key Ksdi : ■ «v ■ • so 55 

M=D (Ksdi, Ksdikbd) 

for use. 



30 



:35 



40 



45 



f t50 



to be broadcast together with the public-key Kbd pi ; the&rr;^ 
data managing center. - ;,- y...n^r 

The user recognizes the digital signature Skbdkvd' 
by the received public-key -Kbd of thsdata managing ..(,:•/? 

center ■ ■ • 1 •■ ?\ J *a'*-zi o 

Kbd=D (Kbd, Skbdkvd) v 



25 and whenr it is justified, use the public-key. 
[Embodiment 6] 



In embodiment 5, in the case where thedatarman- 
aging center adopts the membership system for prelim- 
inarily registering the use of the database, the public-key 
Kbui of users who are members is also preliminarily reg- 
istered with the data managing center. . ■* = 

The data managing center' encrypts the public-key 
Kbd of the data managing center by the public-key.-Kbui- -•; 
ofeachuser .. • r n:\ 

: Ckbdkbui=E (Kbui, Kbd). > x • ■ ■ 

Digital signature is made to the the public-key Kbd of the.' 3.:. 
data managing center by using theprivate-keyKvd of the .= 
data managing center ..Mi, :: nvo/ig *M j-'f 

Skbdkvd=E (Kvd, Kbd)^ -vY - n -\! 

■ "* - ■ vi " "f * "5 

Then, the encrypted public-key Ckbdkbui different from ,c ^ 
one user to another and the digital sigrtatiire Skbdkvd 
are sent to the broadcasting station to broadcast the > "> 
received encrypted public-key Ckbdkbui and the digital 



signature Skbdkvd. ' v .r: f 

At this time, the uncrypted user identification infor- 
mation of each user is broadcast by adding; to the 
encrypted public-key Ckbdkbui if necessary. ■ r 

Uthe uer who has received the broadcast encrypted 
public-key Ckbdkbui and the digital signature- Skbdkvd • 
decrypts the encrypted public-key Gkbdkb.of the data 
managing center by the public-key Kvui; v ' v 

Kbd=D (Kvui, Ckbdkbui) 1 r. ' - 
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and stores the decrypted public-key Kbd of the data man- 
aging center in the user terminal. 

The user recognizes the digital signature Skbdkvd 
by the received public-key Kbd of the data managing 
center 

Kbd=D (Kbd, Skbdkvd), 
> 7 ■ ■" . • :• . ■ • 

and if it isrjustified, uses the stored' public-key Kbd of the 
data managing center. 

In this manner, a crypt key different from one. user • 
to another can be distributed. 

[Embodiment 7] 

Users present their own public-key Kbu to the data 
managingpcenter at each time of access or request to the ■: 
data managing center. \&: 

The' -date 5 managing center " which - receives the 
request from the user encrypts the requested data M by 
the public-key Kbu of the user 

Cmkbu=B(Kbu, M) 

and sends it to the broadcasting station. The broadcast- 
ing station broadcasts the received encrypted data 
Cmkbu. 

The users who receives the broadcast encrypted 
data Cmkbu decrypts by the private-key Kvu of the user 

/; <- M=D (Kvu, Cmkbu),, 



the user secret-key Ksu by the public-key Kbs oMhe shop 



43 



5 



•70 



75 
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Cksukbs=E (Kbs,- Ksu) 



it- 30 



and useit. 1 ; \* 

Figs. 5(a) through 5(c) show the modif ied esamples 
which use the brypt key system of the present invention. 35 

Each esample shown the structure in the figure is 
applied the crypt key system, in electronic market trans- 
action using the electronic data interchange system, to 
the crecfit settlement in retail shops shown in Fig. 5 (a); 
the settlement by means of ;an electronic check shownn: 40 
in Fig/5 (b) ;and;the whole sale conducted by makers and 
the like shown in Fig. 5 (c). . , i 

In these systems, a digital signature is used in addi- 
tion to the secret-ke(y cryptosystem. These systems 
comprise a user 42, and a retail shop 43, a financial 45 
organization -44>or a shotesaler 45 such as a maker the 
like which, is a World Wide .Web (WWW) server on the 
internet. - ; - 

... .-i* - . , . 
[Embodiments] - so 

•'■jV -'•t.v*- • , ■ 

4n the credit settlement in the shop shown in Fig. 5 . 
(a), the shop 43 broadcasts a data Ms such as order form . 
formaUcredii card format, advertisements, catalogs. 
preview;iproducts description, and content introduction i ,55 
of a database, and menu, charge schedule and price list, 
via the satellite 41 and a CATV line. . 

User 42 who receives the data Ms such as order 
form format and a public-key Kbs of the shop 43 encrypts 



and errtete Mu items such e^the order content, the pay- 
ment amibunt and a credit card number with 'encrypted 
by the sectet-key Ksu of user 42 6n the basis of irrforma- ■ 
tion suctnas advertisement, catalog, products descrip- 
tion and charges/prices list ' , ^ ... 

.i • Cmuksu*£,(Ksu,:Mu) t > . *>i'\.m , . : r ^ 

when needed, compresses Mu into m compressed doc- 
ument^muand sign by digital signature by the prjvate-L * 
key Kvu of the user 42 : - 3 

Vif/i-'-i'c'-. r. Smukvu^E„(Kvu r -mu), * • r . 

and transmits it to shopr43 attached wjth the pubUc-key - 
Kbu of the user 42 yiaithe net»yortfe47, . .. . -. . - 

The shop 43 which has received the order decrypts 
the encrypted secret-key CksuWaslof. the usel 42 by the 
private-key Kvs of the shop 43 

> ji/n .;. iKsu^D(Kvs,:CKsukbs); ,\ cz 

and deervptsthe encrypted order document Cmuksu by ; 
the deaypted secret-tey Ksu of the user 42c r .v .. .-.3 r? . . 

Mu^&iKsU;-Crt»uksuhrt v"» *:;v.: 3? 1* 
;.. .«./ '« »i-d --»o/fv, ,-r-.b -c ^ f r mi; !^<;r.'t;-' i r. . " 
Then;o&rTder ; accej^nce .is execulied. ;n ; ;c ; • ^1. 

When the digital signatgre Smuteoi is reoogpized by • 
the public-key Kbu which the user 42 attached 

mu=D (Kbu, Smukvu). v.- ' 

a receipt is sent to the user AZ via thfcnetwork 47. 

In this system, it is possible to prevent the unjustified 
useQfthect€^9U0iberbecau^^e^ - 
entered in the order form is sent with encrypted^ 10 r 

Furtheriitlrte feHowij^g process ^rable^r^liabie trans--- 
actiont: ?j ^.v .---*t a ■ v,-" ■■>■., bL-'j ? 

The shop 43 compresses -the digits data. MsV . of the 
order form format, the credit pard foi;rT^t, advertisements, 
catalog; a .preview, products; description, and Qpnt£nt 
introdbfl^ionof the. .database and .menu/charge sched-^ ; •; 
u\o/pr\ce iist>intoa compressed document r^sl; withdig^.^ 
rtat signature by the private-key Kvs of the shop 43 

Smslkvs=E (Kva, msl) ?. . 

and- broadcasts it attaching the public-key; KbSr,of . the ■ 
shop 43 so that users recognizes: the digital signature 
Smslkvs by using the public-key kbs of the shop 43 

ms'=D (Kbs, Smskvs). 
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[Embodiment 9] • . : . ; > ; , , 

In the settlement by means of electronic ^checks 
shown in Fig. 5 (b), the bank as financial organization 44 
broadcasts the blank check format Mf which is digital s 
data attached with the publlic-key Kbf of the bank 44 via 
the satellite 41 or the CATV line. C ' « 

The user 42 who receives the blank check io&r&& Mf 
encrypts the secret-key Ksu of tiie user 42 by tfte bank J 
public-key Kb . ? , .. c-w-x-ofcid in io 

Cksukbf=E (Kbf, Ksu),^ Q rj;, t a •:: 

enters Mu items concerning a payee and the payment 
amount with encrypted by the secret-key Ksu of the user is 

42 : ? • . . r . .r, . s ■ ^i. i'i • -» «• .- . 

f i / ~~ v. - ^ci w - v'^- «5 
rf Cmksu=E ; (Ksu, My), : - - 

when $ needed, compresses Mujp Jhe compresqesidqc- so 
umerrt mu, and sign by digital. si gnature.by using the prL- 
vate-key Kvu of the user 42 , ~ A y : . 

Srjc.ukyuaE^(Kyu, mu);pr -*=»-.;. - 

and transmits them attaching the public-key Kbu loathe • 
user 42 andtheenprypted secret-key Cksukbf of theuser 
42 which is encrypted, by the the public-key ;Kbf of the; - ... 
bank 44 to the bank 44 via the network 47* ~ ^.^c *-.rv - 
The bank 44 which receives the described check 30 
uses the bank private-key Kvf to decrypt the encrypted 
secret-key Cksukbf of the user 42 

, Ksu=D (Kvf, Gksukbf),- tr ./c ^, 

decrypts the encrypted data Cmuksu of the payee.and>: ... 
the payment amoount by the decrypted userseeretrkey 

Ksu h . ■ ..... . -./.^-t, . - .,. r^:\j-u.-. 

Mu=D (Ksu, Cmuksu) .7. ?, 

J ^ * ac r<2 ■ ■: o. ucsofcso'-:! * f "'" 

and recognize^ ttie 4e^rib^:oointerjt»^T0ih3^rre?icy;c .-v, 
exchange processes execute?! :i xzmtKo\i sna o i ? ; r - ;? 

Furthermore, the bank recognizes; the userr 42 iby . e 
Smuksu wjti^the; digital signature using ihe ; puWic-key v:45 
Kbu added by the user 42 

mu =D (Kbu, Smuksu) 

encrypts the oorif irrigation document; Ms2 by. the public- so 

key Kbu added by the user 42 ':. , .r 1 -*.j.vC 

Cms2kbu=E (Kbu, Ms2) 

and send it back to the user 42 via a network 47. ss 

The user who receives the^encrypted. confirmation - 
document Cms2kbu . from., the bank 44 decrypts the 
encrypted confirmation document Cms2kbu by the pri-- 
vate-key Kvu of the user 42 



. Ms2=D (Kvu, Cms2kbu) t 

and confirms the content. - -* 1 

According to the system, since the patty to which the 
payment is made and the payment amount are 
encrypted and described in the check, -it is possible to 
prevent the unjustified use of the content described in 
the check.- . : . m z 

In addition, the blank check format Mf which is digital 
data is xmpressed into a compressed documentmPand 
signed by digital signature by using the private-key Ktf ' .~£ 
pf the bank 44 

Smfkvf=E (Kvf, mf) 

to be broadcast attaching.the public^key Kbt of the bank • - 
44. The user recognizes the digital signature Smskvs by 2-* 
the public-key Kbs of the bank 44 

mf =D (Kbf. Smfkvf). 

The confirmation document Ms is further cbrnpriassed 
into a compressed document ms with digital signature - J 
by using the public-key Kbu added by the user^ % * » - - - * sr* 

Smskbu=E (Kbu, ms) 

Thus, the bank can recognize the user who has entered 
on the check. . . - - . : . -t, .i/-. rv- 

[Embodiment 10] ..3* "r * w v . ->j.%: i 

At the sholesaler 45 of a maker or the Jike shown* in 
Fig. 5 (C), the wholesaler 45 forms a profofrria invoice - < : 
format Mw1 into a compressed data mwl and sign by dig- • 
ital signature by using the privates-key Kvw of the whole- 
saler 45 .: •;<::■<' , ' : b-.*; :.r • 

Smwlkvw=E (Kvw, mwl) ' ' ■ 

and broadcasts it attaching the public-key Kbw of the 
wholesalier45.via the satellite 41 orCATV lineV 1 nr.wjr, p 
The user 42 Which is a shop receives the broadtfa^f i 
proforma invoice formaLMw^ and 'the 1 public-key Kbw^of 
the wholesaler 45, and encrypts the^ proforma ihvbice - 
request Mu by the public^key Kbw of the ; wholesaler '45 

Cmukbw=E (Kbw, Mu) v , .. 

and transmits it to the wholesaler 45 via the network 47. 

At this time; the proforma invoice request Mu is com- 4 
pressed to compressed data rnu when needed, and 
signed by the digital signature by using the pri vate-key - • 
Kvu of the user 42 « : - . ■. . - >- t- r 

Smkvu=E (Kvu, mu) c ; - 

to be transmitted together with the public-key Kbu of the 
user 42 to the wholesaler 45. 
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The wholesaler 45 which receives the encrypted 
proforma invoice request Cmukbw decrypts the 
encrypted proforma invoice request Gmukbwby the pri- 
vate^key : Kvw of the wholesaler 45 . v 

.. . Mu=D (Kvu, Cmukbw) v. .s ... 

and recognizes the described proforma invoice request 

Mu. is-.:, o/ • •> " * : . •<•• 

Further, the whole saler 45 recognizes the. digital 10 
signature Smkyu by the public-key Kbu of the user. 42^ . ' t *< 

* . v: 

mu=D (Kbu, Smkvu) 

and estimates to the proforma invoice and encrypts the is 
proforma invoice Mw2 by the public-key Kbu of the user 

42 n irr ; - " ~ .. • * '••■». 

Cmw2kbu=D (Kbu. Mw2) 

and then, transmit it to the user 42 via the network 47. 

The user 42 who receives the encrypted proforma 
invoiQe ; Gmw2tou ; fromttae wholesaler AS^decrypts it by 
the private-key Kvu of the user-42 \ 

25 

Mw2=D (Kvu, Cmw2kbu). 

According -to.this system, since the public^key and 
the private-key are used, there is no fear that the content 
of the proforma invoice is stolen to be used and also dif- 30 
ferent proforma invoice can be made for each user 

In the systems shown in Figs. 5 (a) through 5 (c). 
since each format and advertisement with no need of 
secrecy-are ^broadcast via satellite or CATV broadcast- 
ing, the.data can be effectively transmitted. 35 

Asoexplained above, a multimedia system can be - 
realized which combines general information media ^ 
such as television broadcasting and audio broadcasting 
with data communication media using computers by 
using the crypt key system of the present invention, 40 
whhiJe the general information media and the.data com- 
munication media hasjbeen existing so far as an inde-^ 
pende^lisystemreach ^ - : • i 2 " «■* 1 : " 

A concrete structure for cealizmgtoe multimedia sys-: 4 vr. 
tern will be e^lajnedjas foHows: : - ' -a 45 

The current television -broadcasting is provided by~ r :^ 
means of an analog system through terrestrial wave 
broadcasting, satellite broadcasting or CATV broadcast- 
ing. In the meantime, most general data communication 
line is a public telephone line. ,-. • *-» so 

In such a system, structure, the crypt, key system 
according to embodiment 1 shown in Fig : 2 can be used . * ■ 
as a basic structure of a system for realizing a video-on- 
demand. The broadcasting station broadcasts the pub- 
lic-key Kbb in multiplexing with the sub audio band of an 55 
audio zone in the scanning line of the vertical retrace 
interval of an analog television broadcasting program. 



Users who wish to use the television program 
encrypt their own secret-key Ksu by the public-key Kbb 
broadcast irom the broadcasting station 

.'vb f>; CKsukbb=tE-(Kbb. Ksu) "i 

and request for the usage by transmitting the the 
encrypt^"s&ret*key : Cksukbb to the broadcasting sta- 
tion viavfi cGflntrtUnication line. - - 7 ' * 
The broadcasting station decrypts the encrypted * - ; 
secret-key Cksukbb of the users by the private-key Kvb ^ 
of the broadcasting station - " / •- J 4 * 

.* • nvi *fcsu=D (Kvb.nCksukbb)-' r ♦ - - 

scrambles the broadcasting program by the decrypted - % 
secret-key Ksu and broadcasting it. 

The users descrambtes the scrambled program for 
use by their own secret-key Ksu. 

By adopting such a -fet^cturfe* persons : other*than v u 
users thos£ who^requ^s*to Dse theprogram-cannot use ' 
the program. ^ *" ? > ! ' •> 

As a basic structure of a system for realizing the 
video on demand and >pay-per-A4ew1n such a system 
structure, the crypt key system shown in embodiment 4 
orerrrt^meht51h F»g,4c^rtbe : uged> " ^ 

The^bi^adc^ting Station^ iericrypts by the secret^ 
keyK^ofthfebroadC^ftg^fldrt3lthe^ " 
of the broadcasting statfon 31 - ' "iv <*r- >lr « u * n 

*yy. n re- c-f*o .tc " w wrsri -.--1 

r^tx; ...:r-> Cksbkbfc±E (Kbb, K§b)^e ■*' c :v« 
" - -vi,.;. ,-rri tew ru- . 
and broadcasts it via the communication line 37 in mul- 
tiplexing with the scanrtlngitiriS 6r4 sufeyautlio band of 
the retrace interval of the analog television broadcasting 
programs ^ t * * wV'O / -r- v • -.7 ^ 

kfefer 38 whd wishes to use the television program - 
38 requests for the usage by transmitting own public-key w 
Kbu to the broadcasting station 31 via the communica- 
tion line 37. ^1* ■ - ^ •:«• vt 

The broadcasting station 31 scrambles the broad- 
castlngprogFOTt>yme^ecrer-^»^w 
ing station and broadcasts it via the tX3mmunicaftionTfne r ' ' 
37. Atthis time; th§ 4 private-key fKvb df the broadcasting 
station 31< ts*enc*ypted by the publfe-key Kbu of dser 38 1 " v 

Ckvbkbu=E (Kbu, Kvb) 

and is broadcast via the communication line 37. 
> TWe^user 3# debrypts the encryptiBd ,s private Key , : l 
Ckvbkbu of the broadcasting station * -* " - ' 

31 by own private-key Kvu 

Kvb=D (Kvu, Ckvbkbu). 

decrypts the encrypt edsecret-key Cksbkbb of the brbad- 
castingstation31 by thef private-key Kvb of the decrypted ; - 
broadcasting station 31 .i. . - . ■ 
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Ksb=D (Kvb, Cksbkbb) ? ' - it \ 

and descrambles the scrambled broadcasting: pro- 
gramby the decrypts secret-key Ksb of the broadcast- 
ing station 31. O^rrr: 

By adopting such: a structure, persons other; man 
usere who request to use the program cannot use.them. 

Further, the crypt key system can beapplied.tetel- 
evision shoppingwhich is frequently conducted currently 
by combining the television broadcasting aixfcthe-tele-i 

phones. ■ : ■ ' , ■ " — . ' \f - f . ' - ' ; c, ;.K,si i-.J . * .. tv* ri./.Tfc? 

In the currently conducted television shopping which 
uses, the analogs television broadcasting, product intro- 
duction and sales method are presented- on the televi- 
sion screen so that users record information on the sales 
method manually and request for the purchase ^thereof 
by a telephone^ the basis of the recorded Information. 

On the contrary, the .crypt key system according . to 
the present invention proposes a transmission of data of 
the order format and the check format in multiplexing with 
the scanning^ line of the vertical retrace? interval or the. 
sub audio band of the audio zoneo : » < . ■ a ^ib ■;. «< j^-ol. 

In the meantime, an apparatus called personal com- 
puter television set which integrates the personal coftj- 
puter and the television set or an apparatus whioh 
combines a video capture device which is realize as an 
IC card, a PC card or- an insertion board and a personal; 
computerallows incorporation of the.television pictured 

With the combination of^the multiplex data sucrras 
an order format-and ja check format withia video capture 
device, an electronic television-shopping can be con- 
ducted. 

In suctr a television shopping, w&en the televisioo 
shopping^product introduction display js broadcast; the 
order format and the chepk format are broadcasts data 
multiplex with the scanning line of the vertical retrace In- 
terval or the sub audio band of the audio zone. 

If the userstoperate^the apparatus when/the product 
introduction display of the desired produpt to purchase 
is broadcast^the order format and the ctieck format data 
are incorporated with the static displaypipturft- t^; ma, 

ys^n^ w/iQ^wi^ «te«Be lhfe3§l^i»0{fe^bDppipg 
enters necessary items pnyb^rjd^^i^^ #i$pkfpr- 
mat to request for the-purchase. To:sej^ui:e:^the^ajfety of 
the transaction at this time, encryptiopiy4&© pwblto-key 
cryptsosyst^rn ; qr the secret-tey cryptpsystem apetdigr 
ital signature are : used with the ■systefEcaccQrding. tQ 
embodiments 1 toJ>: i r^vr, 3j«$ 

At .this time, the content of transaction: can be 
f irmedjWhen the purchase.prder is requested by. adding 
the static -.display picture of the prpduct introduction 
together with the prder^and the crrejck. > & ? >. j - ... 

As a simple metood, -the order form format and the 
check format may be also transmitted as a;teleyisiop pic- 
ture so that nepessary items are entered on th^order 
format and the check format which are incorporated as 
a static .display pioture. 



In addition, the order form format and the check for- 
mat can be transmitted via facsimile broadcasting which 
is multiplexed with the sub audio band of the audio zone. 
By adopting such a method, an electronic market 
5 using :electronic data irrtercahnge (EDI) by means of a 
current analog television method can be realized with the 
television shopping. . r .: 

These video-on-demand system and the pay-per- 
view system can be applied to the digital television 
10 broadcasting other than the analog television broadcast- 
ing, i .^v s>,-D 
In the case where a CATV line is used as a commu- 
nication line, both the broadcasting and data communf- 
cation can be carried out with the CATV line ortfy. . ^si- 
rs Further, these video^n-demand system and pay- 
per-view system can be also applicable to transmission 
of higfcquality audio data and moving picture data pet- 
formed in computer cqmmunipation network: system 
using low-speed public telephone line or high-speed 
20 integrated services digital network (ISDN) or in internet 
system connecting a plurality of -computer communis 
Hon- rvetwork. . ,y - ^ :,: i 
As an apparatus to be used, the receiving apparatus 
and the communication apparatus can be incorporated 
25 in the television set. Apparatuses can be also constituted 
as a separate apparatus by using a set top box or the like. 

In addition, a constitution an apparatus referred to 
as a personal computer television set which is gradually 
prevalent Gfcby combining^ video capture device which 
30 is realized as an IG;card a PC card or an insertion board 
for transmitting a television signal. to the personal com- 
puter can be used. . O ..vr.fi; 

Claims. .. L ■. $ 1 ' " : - - 5 -7^: . : *• 

35 \* j v. l- • , \* 

1 . Crypt key system comprising atbroadcasting station 
(1 ) , a database (2) , a receiving apparatus (4), a data 
communication apparatus (5) and- a user terminal 
(8)Lwherein ,v. .-;*<; - : • -.-/ ^asi 

40 said database (2>iandsaid broadcasting station (1) 
are connected wth an online communication means 
such as :& dedicated Imev orctbe^Jike^a off^me 
means such as a flexible disc or the like; bne 
said database (2) and ^aid data commanication 

45 apparatus (5) are connected with a communication 
line (7) ; 7 *■■ • :c : ^ „ns 
said broadcasting station (1)- and 1 - said receiving 
apparatus (4) are connected with a radio wav5e (6); 
whereas between said receiving apparatus (4) and 

so said user terminal (8) and between said data com- 
rnunicationapparatus (5) and said user/ terminal: (8) 
said are connectedwith direct online means or with 
off-line means such as a flexiblerdisc; ^ o o 
said database (2) prepares a public-key and^pri- 

55 vate-key and supplies said public-key to saKLbroad- 
casting station (1); ■' . v . ; 

said broadcasting station (1) broadcasts said 
received public-key; 

said receiving apparatus (4) transmits said received 
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public-key td said user terminal (8); 
said user terminal (8) stores said transmitted public- 
key;. ' 
a user encrypts, a secret-key of the user .by said 
received public-key and transmits said secreVkey at 
trie time of request for the use of data which he 
desires, to said database (2); 
said database (2) which has received the request for 
data use decrypts said secret-key of said user by 
salst rprivaterkey ;anct encrypts -the tlata by said, 
decrypted secret-key of said user to transmit the 
data; tp.said-.data . communication apparatus (5) oiat 
said communication line (7); and. : v . ■>: 

said user-jtransmits the received data to; said user 
terminaL(8) ; :tedecrypt said data by said secret-key. 
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Crypt key system according to claim 1 wherein a dig- 
ital signature of said database (2) is provided on said 
pablic-key:* s - - • 

Grypt key systfem^comprising a CATV station (31) , 
a charging center, a receiving apparatus (34) : a data 
communication apparatus (35). and a user terminal 
(38k<where»n; 

between -said CATV station (3^ and sa<l receivings 
apparatus (34) andbetween said C ATV station (31) 
and /said' data communication apparatus (35) are 
connected with a CATV line'(37) ; * * : • 

between said receiving apparatus (34) and said uset* 
terminal (38) and between said data communicatior? : 
apparatus (35) and said^oser terminal (38) are con- 
nected with direct online means or with off-line 
means such as a flexible disc or the like; 
a user preliminarily registers a public-key of said 
user with said CATV station (31) or presents said 
pwblic-key of said frserat the time ofyrequest for 
usage; * :.. . •:* ' I: 
said CATV statidn (31) encrypts a secret-key which 
is a use permit key of said CATV (31 ) station by using 
said public-key of said user who'has requested the 
usage and also encrypts a television program by 
'.said secrefckey, tobroadcasi both via said CATV line 
(37); and $r\ ■ * " : .: ?'* 4 " ; 
said user receives' said encrypted television pro- 
gram and said secret-key with said receiving.appa- 
ratus (34) and decrypts said secret-key by a private- 
key corresponding to said public-key for decrypting 
said^television program by. said decrypted secret- 
'key.' * , .: :;- >. - 

Crypt key system comprising "a CATV station (31), a 
data managing. center (33), a receiving apparatus 
(34), a data communication apparatus (35) and a 
user terminal (38), wherein v 
said CATV. station (31) and said data managing 
center (33) are connected with online communica- 
tion means such as a dedicated line or the like, or 
off-line means such as a flexible disc or the like; -» 
between said CATV station and said receiving appa- 
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ratus (34) and between said CATV station and said 
data communication apparatus (35) are connected 
with: a£ATV line (37) ; 

between said receiving apparatus (34) and said user 
terminal (38) and between said data communication 
apparatus (35) and said user terminal (38) are con- 
nected? with .direct online means oc; with.<ofMine 
mearassiich as a flexible disc or the like; - ^ 
saicfcdata:raanaging center (33) supplies* a public- 
key; aedra secret -key which is a use permit key for 
each data to be supplied, to said CATV station (31); : ? 
s&id GMV; station (3 1> encrypts- said secret-key .for 
eachi data :by saidfcpubl!C?key of <data; managing a.- 
center (33) *to broadcast; an r*v - r; 

ati^requestsfontheuseofdatabyijsir^saiddata ^ 
Communication apparatus ^35) to said data manag- ; 
ingxenter (EE) viasaid CATV line (37) togetherwith v 
transr^ngapublia-key J of,sa^.user;>i^ . -t . ■ 2 
^ saidrdatemansging center (33) encrypts thedata by : : 
said iseeret-key for'^acb data; and encrypts said 
publiokey of data rnanagingcenter (33) by said pub-- ' 
lie-key of said user and transmits encrypted data and 
encrypted said public-key sof^dataimanaging center 
(33) togethet with a private-key*oisaid data ; manage 
irtg^eerrter.^33) to said uset;<~ w ^ vj. * 
said user deer ypts said encrypted publicfkey of data " 
managingicenter (33) by a private-key of -said user, 
decrypt said .encrypted secret-key Joneach databy 
decrypted said public-key of xjatamanagrngicerrter 
(33) and deorypts encrypted data^ by [decrypted saido 
secret-key.for eacfrdaia. r *v ;tr c ~& s-^v 

Gfypt key systerrt-^ccording \6 clafrft 4 wherein a dig- 
rtatf signature 6f-said data managihg cerrter (33) is ' 
£f ©vided 6h 'said pabfic i 4Sey-df data managing center 

(33)?-' ^ ■• »" ' J y- ' r * ! * • 



6. Crypt Kfey»syStem comprising a CATV station (31), a 
data- r managih"g center ^(38)/a ffeceivmg apparatus 

40 (34>, ?a r cteta cdmmuhi6atiort apparatus (35)> arid a 5 
userterm!naF(33)^w*1erein^ - Ci«i>::ir , *' , ; , ^ii; 
^rpubiid-ke^^f^^feer^s registered With *"s&tf data 
msinagirtg "^air (33) : tih^dvancer 1 ' - ; ; - s - :v5f 
said data^ managing center (33) ericrypWa public- 

45 key of 'said data managing center (33) by said public- 
key ofeach user to provide adigital signature on said 
pubJio : key of d^ta rnanaging center (33) by a private- 
key of said data managing center (33) ; ; J ' ' : 
said encrypted -public-key of said data managing 

so canter (33) and ! said digital signature of data man- « 
aging center (33) are sent td said CATV station (31); * 
said CATV station ^(31 ) ; broadcasts said receivecl fl 
encrypted public-key of data managing 'center (33) 
and said digital signature; 

55 -v- said user decrypts'said received encrypted public- 
key of data managing center (33) by said public-key - 
of said user and recognizes said digital signature by 
said decrypted public-key of data control center. 
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Crypt key system according to claim 6 wherein 
uncrypted user identification information of each 
use: is further added to the encrypted public-key of 
said data managing center (33) to be broadcast. 

Crypt key system comprising a CATV station (31), a 

data managing center (33), a receiving apparatus 

(4), a data communication apparatus (35), and a' 

user terminal (38), wherein 

a user presents a public-key of said user to said data 

managing center (33) upon requesting use of the 

data to said data managing center (33); 

said data managing center (33) receives the request 

for data use from said user and encrypts the data 

requested by said public-key of said user to send to 

said CATV station (31) ; 

said CATV station (31) broadcasts said received 
encrypted data; and 

said user who receives said broadcast encrypted 
data decrypts said encrypted data by a private-key 
of said user. r ~~ * c " 
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(54) Crypt key system for broadcast programmes 

(57) The invention relates to a crypt key system 
applicable to a television system, a database system or 
an electronic commercial transaction system or the like. 
This system consists of a broadcasting station 11, a 
database 12, a receiving apparatus 14, a data commu- 
nication apparatus 15 and a user terminal 1 8. As a crypt 
key system, a secret-key cryptosystem, a public-key 
cryptosystem, and a digital signature system are used. 
The keys used in the system are either encrypted or 
remain uncrypted to be supplied by broadcasting. The 
present invention is effective in the prevention of an 
unjustif ied use of the database system, managing cop- 
yrights, and in a pay-per-view system and a video-on- 
demand system. Further, the present invention is effec- 
tive in realizing an electronic market which uses an 
electronic data information system. 
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